Ask yourself this. How many attempts should I give a real member to remember and login to my website?
3? 5? 7? 10?
Well, once that ip reaches the limit you set, then bann that ip from your server.
Over time, the number of failed attempts will drop.
I am not Ray from strongbox
~Ray
|